General

  • Target

    Creal.exe

  • Size

    9.1MB

  • MD5

    b48d964dc5c103e6507557812427e236

  • SHA1

    e13c5ea86dae37739328e908450fa69178ad42b5

  • SHA256

    ec06426cd47daf889d4ef824d6a9375ed266d033b84ce320b3b880322742f3dd

  • SHA512

    2e7d46dc812a779038bd9060b309c352259622e49edeb7e08b35b385af63e62ec4450adbc8128e9e1999f9e2b133d2992062922053fc6d7746db8339661a85ab

  • SSDEEP

    196608:wMyhInrn61W903eV4QRItpDjIIAcwDIlaUGcRP5vvk9LIi/+:uhurnwW+eGQRg9jocBGcqkh

Malware Config

Signatures

  • An infostealer written in Python and packaged with PyInstaller. 1 IoCs
  • Crealstealer family
  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Creal.exe
    .exe windows:5 windows x64 arch:x64

    1af6c885af093afc55142c2f1761dbe8


    Headers

    Imports

    Sections

  • Creal.pyc